CVE-2024-24790
Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip
9.8 CriticalFix available
The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
1.95%Up 1.9 points since Jun 6, 2024
What each source reports
NVD Score used
The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms.
- Record
CVE-2024-24790- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
CVE List
Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip
The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms.
- Record
CVE-2024-24790- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
EUVDEUVD-2024-22167
The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms.
- Record
EUVD-2024-22167- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-49gw-vxvf-fc2g
The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6...
The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms.
- Record
GHSA-49gw-vxvf-fc2g- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVALPINE-CVE-2024-24790
The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms.
- Record
ALPINE-CVE-2024-24790- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
OSVAZL-42386
CVE-2024-24790 affecting package msft-golang for versions less than 1.21.6-1
The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms.
- Record
AZL-42386- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 48 moreShow less
OSVAZL-42395
CVE-2024-24790 affecting package golang for versions less than 1.22.3-1
The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms.
- Record
AZL-42395- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVAZL-42403
CVE-2024-24790 affecting package golang for versions less than 1.21.11-1
The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms.
- Record
AZL-42403- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVAZL-42409
CVE-2024-24790 affecting package golang for versions less than 1.18.8-4
The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms.
- Record
AZL-42409- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVAZL-79050
CVE-2024-24790 affecting package golang 1.25.7-1
The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms.
- Record
AZL-79050- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVAZL-98679
CVE-2024-24790 affecting package golang 1.27.1-1
The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms.
- Record
AZL-98679- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVBELL-CVE-2024-24790
- Record
BELL-CVE-2024-24790- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSV
Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip
The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms.
- Record
CVE-2024-24790- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2024-24790
The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms.
- Record
DEBIAN-CVE-2024-24790- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2024-1770
golang security update
The Go Programming Language.
Security Fix(es):
The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms.(CVE-2024-24790)
- Record
OESA-2024-1770- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHEA-2025:0507
Red Hat Enhancement Advisory: Advisory for publishing Helm 3.15.4 GA release
- Record
RHEA-2025:0507- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2024:4212
Red Hat Security Advisory: golang security update
- Record
RHSA-2024:4212- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2024:4237
Red Hat Security Advisory: go-toolset security update
- Record
RHSA-2024:4237- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2024:4893
Red Hat Security Advisory: rhc-worker-script security update
- Record
RHSA-2024:4893- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2024:5075
Red Hat Security Advisory: golang security update
- Record
RHSA-2024:5075- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2024:5077
Red Hat Security Advisory: go-toolset:rhel8 security update
- Record
RHSA-2024:5077- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2024:5202
Red Hat Security Advisory: OpenShift Container Platform 4.12.63 packages and security update
- Record
RHSA-2024:5202- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2024:5291
Red Hat Security Advisory: grafana security update
- Record
RHSA-2024:5291- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2024:5436
Red Hat Security Advisory: OpenShift Container Platform 4.14.35 security update
- Record
RHSA-2024:5436- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2024:5442
Red Hat Security Advisory: OpenShift Container Platform 4.15.28 packages and security update
- Record
RHSA-2024:5442- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2024:5446
Red Hat Security Advisory: OpenShift Container Platform 4.13.48 packages and security update
- Record
RHSA-2024:5446- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2024:6765
Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update
- Record
RHSA-2024:6765- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2024:7987
Red Hat Security Advisory: Satellite 6.15.4 Security Update
- Record
RHSA-2024:7987- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2024:8418
Red Hat Security Advisory: OpenShift Container Platform 4.16.z security update
- Record
RHSA-2024:8418- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2024:8876
Red Hat Security Advisory: go-toolset:rhel8 security update
- Record
RHSA-2024:8876- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2024:9115
Red Hat Security Advisory: grafana security update
- Record
RHSA-2024:9115- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2025:4664
Red Hat Security Advisory: Red Hat Ceph Storage 7.1 security, bug fix, and enhancement updates
- Record
RHSA-2025:4664- CVSS 3.1
- 9.1 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2025:7256
Red Hat Security Advisory: git-lfs security update
- Record
RHSA-2025:7256- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRLSA-2024:4212
Moderate: golang security update
The golang packages provide the Go programming language compiler.
Security Fix(es):
-
golang: archive/zip: Incorrect handling of certain ZIP files (CVE-2024-24789)
-
golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses (CVE-2024-24790)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2024:4212- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - Updated
- 2026-11-02
OSVRLSA-2024:4237
Moderate: go-toolset security update
Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang.
Security Fix(es):
-
golang: archive/zip: Incorrect handling of certain ZIP files (CVE-2024-24789)
-
golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses (CVE-2024-24790)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2024:4237- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - Updated
- 2026-11-02
OSVRLSA-2024:5291
Moderate: grafana security update
Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB.
Security Fix(es):
-
golang: net: malformed DNS message can cause infinite loop (CVE-2024-24788)
-
golang: archive/zip: Incorrect handling of certain ZIP files (CVE-2024-24789)
-
golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses (CVE-2024-24790)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2024:5291- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRLSA-2025:7256
Moderate: git-lfs security update
Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server.
Security Fix(es):
-
golang: crypto/tls: panic when processing post-handshake message on QUIC connections (CVE-2023-39321)
-
golang: crypto/tls: lack of a limit on buffered post-handshake (CVE-2023-39322)
-
golang: net: malformed DNS message can cause infinite loop (CVE-2024-24788)
-
golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses (CVE-2024-24790)
-
net/http: Denial of service due to improper 100-continue handling in net/http (CVE-2024-24791)
-
golang-fips: Golang FIPS zeroed buffer (CVE-2024-9355)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Rocky Linux 9 Release Notes linked from the References section.
- Record
RLSA-2025:7256- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2024-24790
The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms.
- Record
UBUNTU-CVE-2024-24790- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVALSA-2024:4212 No score
Moderate: golang security update
The golang packages provide the Go programming language compiler.
Security Fix(es):
- golang: archive/zip: Incorrect handling of certain ZIP files (CVE-2024-24789)
- golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses (CVE-2024-24790)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2024:4212- Updated
- 2026-11-02
OSVALSA-2024:4237 No score
Moderate: go-toolset security update
Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang.
Security Fix(es):
- golang: archive/zip: Incorrect handling of certain ZIP files (CVE-2024-24789)
- golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses (CVE-2024-24790)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2024:4237- Updated
- 2026-11-02
OSVALSA-2024:5291 No score
Moderate: grafana security update
Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB.
Security Fix(es):
- golang: net: malformed DNS message can cause infinite loop (CVE-2024-24788)
- golang: archive/zip: Incorrect handling of certain ZIP files (CVE-2024-24789)
- golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses (CVE-2024-24790)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2024:5291- Updated
- 2026-11-02
OSVALSA-2024:9115 No score
Moderate: grafana security update
Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB.
Security Fix(es):
- golang: net: malformed DNS message can cause infinite loop (CVE-2024-24788)
- golang: archive/zip: Incorrect handling of certain ZIP files (CVE-2024-24789)
- golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses (CVE-2024-24790)
- go-retryablehttp: url might write sensitive information to log file (CVE-2024-6104)
- net/http: Denial of service due to improper 100-continue handling in net/http (CVE-2024-24791)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
- Record
ALSA-2024:9115- Updated
- 2026-11-02
OSVALSA-2025:7256 No score
Moderate: git-lfs security update
Git Large File Storage (LFS) replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server.
Security Fix(es):
- golang: crypto/tls: panic when processing post-handshake message on QUIC connections (CVE-2023-39321)
- golang: crypto/tls: lack of a limit on buffered post-handshake (CVE-2023-39322)
- golang: net: malformed DNS message can cause infinite loop (CVE-2024-24788)
- golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses (CVE-2024-24790)
- net/http: Denial of service due to improper 100-continue handling in net/http (CVE-2024-24791)
- golang-fips: Golang FIPS zeroed buffer (CVE-2024-9355)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.
- Record
ALSA-2025:7256- Updated
- 2026-11-02
OSVBIT-golang-2024-24790 No score
Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip
The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms.
- Record
BIT-golang-2024-24790- Updated
- 2026-11-02
OSVCLSA-2025-1748002217 No score
golang: Fix of CVE-2024-24790
- CVE-2024-24790: fix unexpected behavior from Is methods for IPv4-mapped IPv6 addresses
- Record
CLSA-2025-1748002217- Updated
- 2026-11-02
OSVCLSA-2025-1748638811 No score
grafana: Fix of CVE-2024-24790
- CVE-2024-24790: update golang dependency to include fix for CVE-2024-24790
- Record
CLSA-2025-1748638811- Updated
- 2026-11-02
OSVCLSA-2025-1762539123 No score
git-lfs: Fix of 6 CVEs
- Rebuild with golang >= 1.22.5.tuxcare.els7 to fix CVE-2024-24790, CVE-2024-34156, CVE-2023-45288, CVE-2023-39322, CVE-2023-39321, CVE-2024-24788
- Record
CLSA-2025-1762539123- Updated
- 2026-11-02
OSVGO-2024-2887 No score
Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip
The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms.
- Record
GO-2024-2887- Updated
- 2026-11-02
OSVMGASA-2024-0217 No score
Updated golang packages fix security vulnerabilities
The archive/zip package's handling of certain types of invalid zip files differs from the behavior of most zip implementations. This misalignment could be exploited to create an zip file with contents that vary depending on the implementation reading the file. The archive/zip package now rejects files containing these errors. (CVE-2024-24789) The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms. (CVE-2024-24790)
- Record
MGASA-2024-0217- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:14020-1 No score
go1.22-1.22.4-1.1 on GA media
These are all security issues fixed in the go1.22-1.22.4-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:14020-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:14023-1 No score
go1.21-1.21.11-1.1 on GA media
These are all security issues fixed in the go1.21-1.21.11-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:14023-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:14077-1 No score
helmfile-0.166.0-1.1 on GA media
These are all security issues fixed in the helmfile-0.166.0-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:14077-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:14185-1 No score
kubelogin-0.1.4-1.1 on GA media
These are all security issues fixed in the kubelogin-0.1.4-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:14185-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:14554-1 No score
oras-1.2.1-1.1 on GA media
These are all security issues fixed in the oras-1.2.1-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:14554-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
goAlpine:v3.20 |
1.22.0 up to 1.22.4-r0 | 1.22.4-r0 |
goAlpine:v3.21 |
1.22.0 up to 1.22.4-r0 | 1.22.4-r0 |
goAlpine:v3.22 |
1.22.0 up to 1.22.4-r0 | 1.22.4-r0 |
goAlpine:v3.23 |
1.22.0 up to 1.22.4-r0 | 1.22.4-r0 |
goAlpine:v3.24 |
1.22.0 up to 1.22.4-r0 | 1.22.4-r0 |
go-toolsetAlmaLinux:9 From an advisory covering 2 CVEs |
before 1.21.11-1.el9_4 | 1.21.11-1.el9_4 |
golangAlmaLinux:9 From an advisory covering 2 CVEs |
before 1.21.11-1.el9_4 | 1.21.11-1.el9_4 |
golang-binAlmaLinux:9 From an advisory covering 2 CVEs |
before 1.21.11-1.el9_4 | 1.21.11-1.el9_4 |
golang-docsAlmaLinux:9 From an advisory covering 2 CVEs |
before 1.21.11-1.el9_4 | 1.21.11-1.el9_4 |
golang-miscAlmaLinux:9 From an advisory covering 2 CVEs |
before 1.21.11-1.el9_4 | 1.21.11-1.el9_4 |
Show 290 moreShow less
| Package | Affected | Fixed |
|---|---|---|
golang-srcAlmaLinux:9 From an advisory covering 2 CVEs |
before 1.21.11-1.el9_4 | 1.21.11-1.el9_4 |
golang-testsAlmaLinux:9 From an advisory covering 2 CVEs |
before 1.21.11-1.el9_4 | 1.21.11-1.el9_4 |
delveAlmaLinux:8 From an advisory covering 2 CVEs |
before 1.21.2-3.module_el8.10.0+3760+4dd778f9 | 1.21.2-3.module_el8.10.0+3760+4dd778f9 |
go-toolsetAlmaLinux:8 From an advisory covering 2 CVEs |
before 1.21.11-1.module_el8.10.0+3863+bb82df69 | 1.21.11-1.module_el8.10.0+3863+bb82df69 |
golangAlmaLinux:8 From an advisory covering 2 CVEs |
before 1.21.11-1.module_el8.10.0+3863+bb82df69 | 1.21.11-1.module_el8.10.0+3863+bb82df69 |
golang-binAlmaLinux:8 From an advisory covering 2 CVEs |
before 1.21.11-1.module_el8.10.0+3863+bb82df69 | 1.21.11-1.module_el8.10.0+3863+bb82df69 |
golang-docsAlmaLinux:8 From an advisory covering 2 CVEs |
before 1.21.11-1.module_el8.10.0+3863+bb82df69 | 1.21.11-1.module_el8.10.0+3863+bb82df69 |
golang-miscAlmaLinux:8 From an advisory covering 2 CVEs |
before 1.21.11-1.module_el8.10.0+3863+bb82df69 | 1.21.11-1.module_el8.10.0+3863+bb82df69 |
golang-srcAlmaLinux:8 From an advisory covering 2 CVEs |
before 1.21.11-1.module_el8.10.0+3863+bb82df69 | 1.21.11-1.module_el8.10.0+3863+bb82df69 |
golang-testsAlmaLinux:8 From an advisory covering 2 CVEs |
before 1.21.11-1.module_el8.10.0+3863+bb82df69 | 1.21.11-1.module_el8.10.0+3863+bb82df69 |
grafanaAlmaLinux:8 From an advisory covering 3 CVEs |
before 9.2.10-17.el8_10 | 9.2.10-17.el8_10 |
grafana-selinuxAlmaLinux:8 From an advisory covering 3 CVEs |
before 9.2.10-17.el8_10 | 9.2.10-17.el8_10 |
grafanaAlmaLinux:9 From an advisory covering 5 CVEs |
before 10.2.6-4.el9 | 10.2.6-4.el9 |
grafana-selinuxAlmaLinux:9 From an advisory covering 5 CVEs |
before 10.2.6-4.el9 | 10.2.6-4.el9 |
git-lfsAlmaLinux:9 From an advisory covering 6 CVEs |
before 3.6.1-1.el9 | 3.6.1-1.el9 |
msft-golangAzure Linux:2 |
before 1.21.6-1 | 1.21.6-1 |
golangAzure Linux:2 |
before 1.22.3-1 | 1.22.3-1 |
golangAzure Linux:2 |
1.19.0 up to 1.21.11-1 | 1.21.11-1 |
golangAzure Linux:2 |
1.18.0 up to 1.18.8-4 | 1.18.8-4 |
golangAzure Linux:3 |
through 1.25.7-1 | None known |
golangAzure Linux:3 |
1.27.0 to 1.27.1-1 | None known |
goAlpaquita:23 |
1.19.7-r0 up to 1.21.12-r0 | 1.21.12-r0 |
goAlpaquita:stream |
1.20.5-r2 up to 1.22.4-r1 | 1.22.4-r1 |
goBellSoft Hardened Containers:23 |
1.19.7-r0 up to 1.21.12-r0 | 1.21.12-r0 |
goBellSoft Hardened Containers:stream |
1.20.5-r2 up to 1.22.4-r1 | 1.22.4-r1 |
golangBitnami |
before 1.21.11, 1.22.0-0 up to 1.22.4 | 1.21.111.22.4 |
golangTuxCare:AlmaLinux:9.2 |
before 1.19.13-1.el9_2.tuxcare.els6 | 1.19.13-1.el9_2.tuxcare.els6 |
golang-binTuxCare:AlmaLinux:9.2 |
before 1.19.13-1.el9_2.tuxcare.els6 | 1.19.13-1.el9_2.tuxcare.els6 |
golang-docsTuxCare:AlmaLinux:9.2 |
before 1.19.13-1.el9_2.tuxcare.els6 | 1.19.13-1.el9_2.tuxcare.els6 |
golang-miscTuxCare:AlmaLinux:9.2 |
before 1.19.13-1.el9_2.tuxcare.els6 | 1.19.13-1.el9_2.tuxcare.els6 |
golang-raceTuxCare:AlmaLinux:9.2 |
before 1.19.13-1.el9_2.tuxcare.els6 | 1.19.13-1.el9_2.tuxcare.els6 |
golang-srcTuxCare:AlmaLinux:9.2 |
before 1.19.13-1.el9_2.tuxcare.els6 | 1.19.13-1.el9_2.tuxcare.els6 |
golang-testsTuxCare:AlmaLinux:9.2 |
before 1.19.13-1.el9_2.tuxcare.els6 | 1.19.13-1.el9_2.tuxcare.els6 |
grafanaTuxCare:AlmaLinux:9.2 |
before 9.0.9-4.el9_2.alma.1.tuxcare.els2 | 9.0.9-4.el9_2.alma.1.tuxcare.els2 |
git-lfsTuxCare:AlmaLinux:9.2 From an advisory covering 6 CVEs |
before 3.2.0-1.el9.tuxcare.els1 | 3.2.0-1.el9.tuxcare.els1 |
golang-1.19Debian:12 |
All versions, plus listed versions 1.19.10-11.19.10-21.19.11-11.19.12-11.19.12-2 Show 7 moreShow less1.19.12-2~bpo11+11.19.12-2~bpo12+11.19.13-11.19.13-1~bpo11+11.19.13-1~bpo12+11.19.8-21.19.9-1 |
None known |
stdlibGo |
before 1.21.11, 1.22.0-0 up to 1.22.4 | 1.21.111.22.4 |
golangMageia:9 From an advisory covering 2 CVEs |
before 1.21.11-1.mga9 | 1.21.11-1.mga9 |
golangopenEuler:24.03-LTS |
before 1.21.4-12.oe2403 | 1.21.4-12.oe2403 |
helmRed Hat:ocp_tools:4.17::el9 From an advisory covering 3 CVEs |
before 0:3.15.4-60.el9 | 0:3.15.4-60.el9 |
helm-redistributableRed Hat:ocp_tools:4.17::el9 From an advisory covering 3 CVEs |
before 0:3.15.4-60.el9 | 0:3.15.4-60.el9 |
go-toolsetRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:1.21.11-1.el9_4 | 0:1.21.11-1.el9_4 |
golangRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:1.21.11-1.el9_4 | 0:1.21.11-1.el9_4 |
golang-binRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:1.21.11-1.el9_4 | 0:1.21.11-1.el9_4 |
golang-docsRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:1.21.11-1.el9_4 | 0:1.21.11-1.el9_4 |
golang-miscRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:1.21.11-1.el9_4 | 0:1.21.11-1.el9_4 |
golang-srcRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:1.21.11-1.el9_4 | 0:1.21.11-1.el9_4 |
golang-testsRed Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs |
before 0:1.21.11-1.el9_4 | 0:1.21.11-1.el9_4 |
delveRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:1.21.2-3.module+el8.10.0+21244+5b2d9000 | 0:1.21.2-3.module+el8.10.0+21244+5b2d9000 |
delve-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:1.21.2-3.module+el8.10.0+21244+5b2d9000 | 0:1.21.2-3.module+el8.10.0+21244+5b2d9000 |
delve-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:1.21.2-3.module+el8.10.0+21244+5b2d9000 | 0:1.21.2-3.module+el8.10.0+21244+5b2d9000 |
go-toolsetRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:1.21.11-1.module+el8.10.0+21986+2112108a | 0:1.21.11-1.module+el8.10.0+21986+2112108a |
golangRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:1.21.11-1.module+el8.10.0+21986+2112108a | 0:1.21.11-1.module+el8.10.0+21986+2112108a |
golang-binRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:1.21.11-1.module+el8.10.0+21986+2112108a | 0:1.21.11-1.module+el8.10.0+21986+2112108a |
golang-docsRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:1.21.11-1.module+el8.10.0+21986+2112108a | 0:1.21.11-1.module+el8.10.0+21986+2112108a |
golang-miscRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:1.21.11-1.module+el8.10.0+21986+2112108a | 0:1.21.11-1.module+el8.10.0+21986+2112108a |
golang-srcRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:1.21.11-1.module+el8.10.0+21986+2112108a | 0:1.21.11-1.module+el8.10.0+21986+2112108a |
golang-testsRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:1.21.11-1.module+el8.10.0+21986+2112108a | 0:1.21.11-1.module+el8.10.0+21986+2112108a |
rhc-worker-scriptRed Hat:rhel_els:7 From an advisory covering 4 CVEs |
before 0:0.9-5.el7_9 | 0:0.9-5.el7_9 |
golangRed Hat:rhel_eus:9.2::appstream From an advisory covering 2 CVEs |
before 0:1.19.13-9.el9_2 | 0:1.19.13-9.el9_2 |
golang-binRed Hat:rhel_eus:9.2::appstream From an advisory covering 2 CVEs |
before 0:1.19.13-9.el9_2 | 0:1.19.13-9.el9_2 |
golang-docsRed Hat:rhel_eus:9.2::appstream From an advisory covering 2 CVEs |
before 0:1.19.13-9.el9_2 | 0:1.19.13-9.el9_2 |
golang-miscRed Hat:rhel_eus:9.2::appstream From an advisory covering 2 CVEs |
before 0:1.19.13-9.el9_2 | 0:1.19.13-9.el9_2 |
golang-raceRed Hat:rhel_eus:9.2::appstream From an advisory covering 2 CVEs |
before 0:1.19.13-9.el9_2 | 0:1.19.13-9.el9_2 |
golang-srcRed Hat:rhel_eus:9.2::appstream From an advisory covering 2 CVEs |
before 0:1.19.13-9.el9_2 | 0:1.19.13-9.el9_2 |
golang-testsRed Hat:rhel_eus:9.2::appstream From an advisory covering 2 CVEs |
before 0:1.19.13-9.el9_2 | 0:1.19.13-9.el9_2 |
delveRed Hat:rhel_eus:8.8::appstream From an advisory covering 2 CVEs |
before 0:1.9.1-1.module+el8.8.0+16778+5fbb74f5 | 0:1.9.1-1.module+el8.8.0+16778+5fbb74f5 |
delve-debuginfoRed Hat:rhel_eus:8.8::appstream From an advisory covering 2 CVEs |
before 0:1.9.1-1.module+el8.8.0+16778+5fbb74f5 | 0:1.9.1-1.module+el8.8.0+16778+5fbb74f5 |
delve-debugsourceRed Hat:rhel_eus:8.8::appstream From an advisory covering 2 CVEs |
before 0:1.9.1-1.module+el8.8.0+16778+5fbb74f5 | 0:1.9.1-1.module+el8.8.0+16778+5fbb74f5 |
go-toolsetRed Hat:rhel_eus:8.8::appstream From an advisory covering 2 CVEs |
before 0:1.19.13-2.module+el8.8.0+22004+c5f8797c | 0:1.19.13-2.module+el8.8.0+22004+c5f8797c |
golangRed Hat:rhel_eus:8.8::appstream From an advisory covering 2 CVEs |
before 0:1.19.13-9.module+el8.8.0+22163+5429357b | 0:1.19.13-9.module+el8.8.0+22163+5429357b |
golang-binRed Hat:rhel_eus:8.8::appstream From an advisory covering 2 CVEs |
before 0:1.19.13-9.module+el8.8.0+22163+5429357b | 0:1.19.13-9.module+el8.8.0+22163+5429357b |
golang-docsRed Hat:rhel_eus:8.8::appstream From an advisory covering 2 CVEs |
before 0:1.19.13-9.module+el8.8.0+22163+5429357b | 0:1.19.13-9.module+el8.8.0+22163+5429357b |
golang-miscRed Hat:rhel_eus:8.8::appstream From an advisory covering 2 CVEs |
before 0:1.19.13-9.module+el8.8.0+22163+5429357b | 0:1.19.13-9.module+el8.8.0+22163+5429357b |
golang-raceRed Hat:rhel_eus:8.8::appstream From an advisory covering 2 CVEs |
before 0:1.19.13-9.module+el8.8.0+22163+5429357b | 0:1.19.13-9.module+el8.8.0+22163+5429357b |
golang-srcRed Hat:rhel_eus:8.8::appstream From an advisory covering 2 CVEs |
before 0:1.19.13-9.module+el8.8.0+22163+5429357b | 0:1.19.13-9.module+el8.8.0+22163+5429357b |
golang-testsRed Hat:rhel_eus:8.8::appstream From an advisory covering 2 CVEs |
before 0:1.19.13-9.module+el8.8.0+22163+5429357b | 0:1.19.13-9.module+el8.8.0+22163+5429357b |
cri-oRed Hat:openshift:4.12::el8 From an advisory covering 3 CVEs |
before 0:1.25.5-25.rhaos4.12.git6556f50.el8 | 0:1.25.5-25.rhaos4.12.git6556f50.el8 |
cri-o-debuginfoRed Hat:openshift:4.12::el8 From an advisory covering 3 CVEs |
before 0:1.25.5-25.rhaos4.12.git6556f50.el8 | 0:1.25.5-25.rhaos4.12.git6556f50.el8 |
cri-o-debugsourceRed Hat:openshift:4.12::el8 From an advisory covering 3 CVEs |
before 0:1.25.5-25.rhaos4.12.git6556f50.el8 | 0:1.25.5-25.rhaos4.12.git6556f50.el8 |
podmanRed Hat:openshift:4.12::el8 From an advisory covering 3 CVEs |
before 3:4.4.1-7.rhaos4.12.el8 | 3:4.4.1-7.rhaos4.12.el8 |
podman-catatonitRed Hat:openshift:4.12::el8 From an advisory covering 3 CVEs |
before 3:4.4.1-7.rhaos4.12.el8 | 3:4.4.1-7.rhaos4.12.el8 |
podman-catatonit-debuginfoRed Hat:openshift:4.12::el8 From an advisory covering 3 CVEs |
before 3:4.4.1-7.rhaos4.12.el8 | 3:4.4.1-7.rhaos4.12.el8 |
podman-debuginfoRed Hat:openshift:4.12::el8 From an advisory covering 3 CVEs |
before 3:4.4.1-7.rhaos4.12.el8 | 3:4.4.1-7.rhaos4.12.el8 |
podman-debugsourceRed Hat:openshift:4.12::el8 From an advisory covering 3 CVEs |
before 3:4.4.1-7.rhaos4.12.el8 | 3:4.4.1-7.rhaos4.12.el8 |
podman-dockerRed Hat:openshift:4.12::el8 From an advisory covering 3 CVEs |
before 3:4.4.1-7.rhaos4.12.el8 | 3:4.4.1-7.rhaos4.12.el8 |
podman-gvproxyRed Hat:openshift:4.12::el8 From an advisory covering 3 CVEs |
before 3:4.4.1-7.rhaos4.12.el8 | 3:4.4.1-7.rhaos4.12.el8 |
podman-gvproxy-debuginfoRed Hat:openshift:4.12::el8 From an advisory covering 3 CVEs |
before 3:4.4.1-7.rhaos4.12.el8 | 3:4.4.1-7.rhaos4.12.el8 |
podman-pluginsRed Hat:openshift:4.12::el8 From an advisory covering 3 CVEs |
before 3:4.4.1-7.rhaos4.12.el8 | 3:4.4.1-7.rhaos4.12.el8 |
podman-plugins-debuginfoRed Hat:openshift:4.12::el8 From an advisory covering 3 CVEs |
before 3:4.4.1-7.rhaos4.12.el8 | 3:4.4.1-7.rhaos4.12.el8 |
podman-remoteRed Hat:openshift:4.12::el8 From an advisory covering 3 CVEs |
before 3:4.4.1-7.rhaos4.12.el8 | 3:4.4.1-7.rhaos4.12.el8 |
podman-remote-debuginfoRed Hat:openshift:4.12::el8 From an advisory covering 3 CVEs |
before 3:4.4.1-7.rhaos4.12.el8 | 3:4.4.1-7.rhaos4.12.el8 |
podman-testsRed Hat:openshift:4.12::el8 From an advisory covering 3 CVEs |
before 3:4.4.1-7.rhaos4.12.el8 | 3:4.4.1-7.rhaos4.12.el8 |
cri-oRed Hat:openshift:4.12::el9 From an advisory covering 3 CVEs |
before 0:1.25.3-7.rhaos4.12.git44a2cb2.el9 | 0:1.25.3-7.rhaos4.12.git44a2cb2.el9 |
cri-o-debuginfoRed Hat:openshift:4.12::el9 From an advisory covering 3 CVEs |
before 0:1.25.3-7.rhaos4.12.git44a2cb2.el9 | 0:1.25.3-7.rhaos4.12.git44a2cb2.el9 |
cri-o-debugsourceRed Hat:openshift:4.12::el9 From an advisory covering 3 CVEs |
before 0:1.25.3-7.rhaos4.12.git44a2cb2.el9 | 0:1.25.3-7.rhaos4.12.git44a2cb2.el9 |
podmanRed Hat:openshift:4.12::el9 From an advisory covering 3 CVEs |
before 3:4.2.0-11.rhaos4.12.el9 | 3:4.2.0-11.rhaos4.12.el9 |
podman-catatonitRed Hat:openshift:4.12::el9 From an advisory covering 3 CVEs |
before 3:4.2.0-11.rhaos4.12.el9 | 3:4.2.0-11.rhaos4.12.el9 |
podman-catatonit-debuginfoRed Hat:openshift:4.12::el9 From an advisory covering 3 CVEs |
before 3:4.2.0-11.rhaos4.12.el9 | 3:4.2.0-11.rhaos4.12.el9 |
podman-debuginfoRed Hat:openshift:4.12::el9 From an advisory covering 3 CVEs |
before 3:4.2.0-11.rhaos4.12.el9 | 3:4.2.0-11.rhaos4.12.el9 |
podman-debugsourceRed Hat:openshift:4.12::el9 From an advisory covering 3 CVEs |
before 3:4.2.0-11.rhaos4.12.el9 | 3:4.2.0-11.rhaos4.12.el9 |
podman-dockerRed Hat:openshift:4.12::el9 From an advisory covering 3 CVEs |
before 3:4.2.0-11.rhaos4.12.el9 | 3:4.2.0-11.rhaos4.12.el9 |
podman-gvproxyRed Hat:openshift:4.12::el9 From an advisory covering 3 CVEs |
before 3:4.2.0-11.rhaos4.12.el9 | 3:4.2.0-11.rhaos4.12.el9 |
podman-gvproxy-debuginfoRed Hat:openshift:4.12::el9 From an advisory covering 3 CVEs |
before 3:4.2.0-11.rhaos4.12.el9 | 3:4.2.0-11.rhaos4.12.el9 |
podman-pluginsRed Hat:openshift:4.12::el9 From an advisory covering 3 CVEs |
before 3:4.2.0-11.rhaos4.12.el9 | 3:4.2.0-11.rhaos4.12.el9 |
podman-plugins-debuginfoRed Hat:openshift:4.12::el9 From an advisory covering 3 CVEs |
before 3:4.2.0-11.rhaos4.12.el9 | 3:4.2.0-11.rhaos4.12.el9 |
podman-remoteRed Hat:openshift:4.12::el9 From an advisory covering 3 CVEs |
before 3:4.2.0-11.rhaos4.12.el9 | 3:4.2.0-11.rhaos4.12.el9 |
podman-remote-debuginfoRed Hat:openshift:4.12::el9 From an advisory covering 3 CVEs |
before 3:4.2.0-11.rhaos4.12.el9 | 3:4.2.0-11.rhaos4.12.el9 |
podman-testsRed Hat:openshift:4.12::el9 From an advisory covering 3 CVEs |
before 3:4.2.0-11.rhaos4.12.el9 | 3:4.2.0-11.rhaos4.12.el9 |
grafanaRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:9.2.10-17.el8_10 | 0:9.2.10-17.el8_10 |
grafana-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:9.2.10-17.el8_10 | 0:9.2.10-17.el8_10 |
grafana-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:9.2.10-17.el8_10 | 0:9.2.10-17.el8_10 |
grafana-selinuxRed Hat:enterprise_linux:8::appstream From an advisory covering 3 CVEs |
before 0:9.2.10-17.el8_10 | 0:9.2.10-17.el8_10 |
cri-oRed Hat:openshift:4.14::el8 From an advisory covering 2 CVEs |
before 0:1.27.8-5.rhaos4.14.git107168f.el8 | 0:1.27.8-5.rhaos4.14.git107168f.el8 |
cri-o-debuginfoRed Hat:openshift:4.14::el8 From an advisory covering 2 CVEs |
before 0:1.27.8-5.rhaos4.14.git107168f.el8 | 0:1.27.8-5.rhaos4.14.git107168f.el8 |
cri-o-debugsourceRed Hat:openshift:4.14::el8 From an advisory covering 2 CVEs |
before 0:1.27.8-5.rhaos4.14.git107168f.el8 | 0:1.27.8-5.rhaos4.14.git107168f.el8 |
openshiftRed Hat:openshift:4.14::el8 From an advisory covering 2 CVEs |
before 0:4.14.0-202408071611.p0.ge826056.assembly.stream.el8 | 0:4.14.0-202408071611.p0.ge826056.assembly.stream.el8 |
openshift-hyperkubeRed Hat:openshift:4.14::el8 From an advisory covering 2 CVEs |
before 0:4.14.0-202408071611.p0.ge826056.assembly.stream.el8 | 0:4.14.0-202408071611.p0.ge826056.assembly.stream.el8 |
ose-aws-ecr-image-credential-providerRed Hat:openshift:4.14::el8 From an advisory covering 2 CVEs |
before 0:4.14.0-202408072340.p0.g471f069.assembly.stream.el8 | 0:4.14.0-202408072340.p0.g471f069.assembly.stream.el8 |
podmanRed Hat:openshift:4.14::el8 From an advisory covering 2 CVEs |
before 3:4.4.1-18.rhaos4.14.el8 | 3:4.4.1-18.rhaos4.14.el8 |
podman-catatonitRed Hat:openshift:4.14::el8 From an advisory covering 2 CVEs |
before 3:4.4.1-18.rhaos4.14.el8 | 3:4.4.1-18.rhaos4.14.el8 |
podman-catatonit-debuginfoRed Hat:openshift:4.14::el8 From an advisory covering 2 CVEs |
before 3:4.4.1-18.rhaos4.14.el8 | 3:4.4.1-18.rhaos4.14.el8 |
podman-debuginfoRed Hat:openshift:4.14::el8 From an advisory covering 2 CVEs |
before 3:4.4.1-18.rhaos4.14.el8 | 3:4.4.1-18.rhaos4.14.el8 |
podman-debugsourceRed Hat:openshift:4.14::el8 From an advisory covering 2 CVEs |
before 3:4.4.1-18.rhaos4.14.el8 | 3:4.4.1-18.rhaos4.14.el8 |
podman-dockerRed Hat:openshift:4.14::el8 From an advisory covering 2 CVEs |
before 3:4.4.1-18.rhaos4.14.el8 | 3:4.4.1-18.rhaos4.14.el8 |
podman-gvproxyRed Hat:openshift:4.14::el8 From an advisory covering 2 CVEs |
before 3:4.4.1-18.rhaos4.14.el8 | 3:4.4.1-18.rhaos4.14.el8 |
podman-gvproxy-debuginfoRed Hat:openshift:4.14::el8 From an advisory covering 2 CVEs |
before 3:4.4.1-18.rhaos4.14.el8 | 3:4.4.1-18.rhaos4.14.el8 |
podman-pluginsRed Hat:openshift:4.14::el8 From an advisory covering 2 CVEs |
before 3:4.4.1-18.rhaos4.14.el8 | 3:4.4.1-18.rhaos4.14.el8 |
podman-plugins-debuginfoRed Hat:openshift:4.14::el8 From an advisory covering 2 CVEs |
before 3:4.4.1-18.rhaos4.14.el8 | 3:4.4.1-18.rhaos4.14.el8 |
podman-remoteRed Hat:openshift:4.14::el8 From an advisory covering 2 CVEs |
before 3:4.4.1-18.rhaos4.14.el8 | 3:4.4.1-18.rhaos4.14.el8 |
podman-remote-debuginfoRed Hat:openshift:4.14::el8 From an advisory covering 2 CVEs |
before 3:4.4.1-18.rhaos4.14.el8 | 3:4.4.1-18.rhaos4.14.el8 |
podman-testsRed Hat:openshift:4.14::el8 From an advisory covering 2 CVEs |
before 3:4.4.1-18.rhaos4.14.el8 | 3:4.4.1-18.rhaos4.14.el8 |
cri-oRed Hat:openshift:4.14::el9 From an advisory covering 2 CVEs |
before 0:1.27.8-5.rhaos4.14.git107168f.el9 | 0:1.27.8-5.rhaos4.14.git107168f.el9 |
cri-o-debuginfoRed Hat:openshift:4.14::el9 From an advisory covering 2 CVEs |
before 0:1.27.8-5.rhaos4.14.git107168f.el9 | 0:1.27.8-5.rhaos4.14.git107168f.el9 |
cri-o-debugsourceRed Hat:openshift:4.14::el9 From an advisory covering 2 CVEs |
before 0:1.27.8-5.rhaos4.14.git107168f.el9 | 0:1.27.8-5.rhaos4.14.git107168f.el9 |
openshiftRed Hat:openshift:4.14::el9 From an advisory covering 2 CVEs |
before 0:4.14.0-202408071611.p0.ge826056.assembly.stream.el9 | 0:4.14.0-202408071611.p0.ge826056.assembly.stream.el9 |
openshift-hyperkubeRed Hat:openshift:4.14::el9 From an advisory covering 2 CVEs |
before 0:4.14.0-202408071611.p0.ge826056.assembly.stream.el9 | 0:4.14.0-202408071611.p0.ge826056.assembly.stream.el9 |
ose-aws-ecr-image-credential-providerRed Hat:openshift:4.14::el9 From an advisory covering 2 CVEs |
before 0:4.14.0-202408072340.p0.g471f069.assembly.stream.el9 | 0:4.14.0-202408072340.p0.g471f069.assembly.stream.el9 |
podmanRed Hat:openshift:4.14::el9 From an advisory covering 2 CVEs |
before 3:4.4.1-18.rhaos4.14.el9 | 3:4.4.1-18.rhaos4.14.el9 |
podman-debuginfoRed Hat:openshift:4.14::el9 From an advisory covering 2 CVEs |
before 3:4.4.1-18.rhaos4.14.el9 | 3:4.4.1-18.rhaos4.14.el9 |
podman-debugsourceRed Hat:openshift:4.14::el9 From an advisory covering 2 CVEs |
before 3:4.4.1-18.rhaos4.14.el9 | 3:4.4.1-18.rhaos4.14.el9 |
podman-dockerRed Hat:openshift:4.14::el9 From an advisory covering 2 CVEs |
before 3:4.4.1-18.rhaos4.14.el9 | 3:4.4.1-18.rhaos4.14.el9 |
podman-gvproxyRed Hat:openshift:4.14::el9 From an advisory covering 2 CVEs |
before 3:4.4.1-18.rhaos4.14.el9 | 3:4.4.1-18.rhaos4.14.el9 |
podman-gvproxy-debuginfoRed Hat:openshift:4.14::el9 From an advisory covering 2 CVEs |
before 3:4.4.1-18.rhaos4.14.el9 | 3:4.4.1-18.rhaos4.14.el9 |
podman-pluginsRed Hat:openshift:4.14::el9 From an advisory covering 2 CVEs |
before 3:4.4.1-18.rhaos4.14.el9 | 3:4.4.1-18.rhaos4.14.el9 |
podman-plugins-debuginfoRed Hat:openshift:4.14::el9 From an advisory covering 2 CVEs |
before 3:4.4.1-18.rhaos4.14.el9 | 3:4.4.1-18.rhaos4.14.el9 |
podman-remoteRed Hat:openshift:4.14::el9 From an advisory covering 2 CVEs |
before 3:4.4.1-18.rhaos4.14.el9 | 3:4.4.1-18.rhaos4.14.el9 |
podman-remote-debuginfoRed Hat:openshift:4.14::el9 From an advisory covering 2 CVEs |
before 3:4.4.1-18.rhaos4.14.el9 | 3:4.4.1-18.rhaos4.14.el9 |
podman-testsRed Hat:openshift:4.14::el9 From an advisory covering 2 CVEs |
before 3:4.4.1-18.rhaos4.14.el9 | 3:4.4.1-18.rhaos4.14.el9 |
openshiftRed Hat:openshift:4.15::el8 From an advisory covering 2 CVEs |
before 0:4.15.0-202408091502.p0.g396c881.assembly.stream.el8 | 0:4.15.0-202408091502.p0.g396c881.assembly.stream.el8 |
openshift-hyperkubeRed Hat:openshift:4.15::el8 From an advisory covering 2 CVEs |
before 0:4.15.0-202408091502.p0.g396c881.assembly.stream.el8 | 0:4.15.0-202408091502.p0.g396c881.assembly.stream.el8 |
ose-aws-ecr-image-credential-providerRed Hat:openshift:4.15::el8 From an advisory covering 2 CVEs |
before 0:4.15.0-202408091502.p0.g1e5e25d.assembly.stream.el8 | 0:4.15.0-202408091502.p0.g1e5e25d.assembly.stream.el8 |
ose-azure-acr-image-credential-providerRed Hat:openshift:4.15::el8 From an advisory covering 2 CVEs |
before 0:4.15.0-202408091502.p0.g0d799a2.assembly.stream.el8 | 0:4.15.0-202408091502.p0.g0d799a2.assembly.stream.el8 |
ose-gcp-gcr-image-credential-providerRed Hat:openshift:4.15::el8 From an advisory covering 2 CVEs |
before 0:4.15.0-202408091502.p0.gfc50272.assembly.stream.el8 | 0:4.15.0-202408091502.p0.gfc50272.assembly.stream.el8 |
podmanRed Hat:openshift:4.15::el8 From an advisory covering 2 CVEs |
before 3:4.4.1-29.rhaos4.15.el8 | 3:4.4.1-29.rhaos4.15.el8 |
podman-catatonitRed Hat:openshift:4.15::el8 From an advisory covering 2 CVEs |
before 3:4.4.1-29.rhaos4.15.el8 | 3:4.4.1-29.rhaos4.15.el8 |
podman-catatonit-debuginfoRed Hat:openshift:4.15::el8 From an advisory covering 2 CVEs |
before 3:4.4.1-29.rhaos4.15.el8 | 3:4.4.1-29.rhaos4.15.el8 |
podman-debuginfoRed Hat:openshift:4.15::el8 From an advisory covering 2 CVEs |
before 3:4.4.1-29.rhaos4.15.el8 | 3:4.4.1-29.rhaos4.15.el8 |
podman-debugsourceRed Hat:openshift:4.15::el8 From an advisory covering 2 CVEs |
before 3:4.4.1-29.rhaos4.15.el8 | 3:4.4.1-29.rhaos4.15.el8 |
podman-dockerRed Hat:openshift:4.15::el8 From an advisory covering 2 CVEs |
before 3:4.4.1-29.rhaos4.15.el8 | 3:4.4.1-29.rhaos4.15.el8 |
podman-gvproxyRed Hat:openshift:4.15::el8 From an advisory covering 2 CVEs |
before 3:4.4.1-29.rhaos4.15.el8 | 3:4.4.1-29.rhaos4.15.el8 |
podman-gvproxy-debuginfoRed Hat:openshift:4.15::el8 From an advisory covering 2 CVEs |
before 3:4.4.1-29.rhaos4.15.el8 | 3:4.4.1-29.rhaos4.15.el8 |
podman-pluginsRed Hat:openshift:4.15::el8 From an advisory covering 2 CVEs |
before 3:4.4.1-29.rhaos4.15.el8 | 3:4.4.1-29.rhaos4.15.el8 |
podman-plugins-debuginfoRed Hat:openshift:4.15::el8 From an advisory covering 2 CVEs |
before 3:4.4.1-29.rhaos4.15.el8 | 3:4.4.1-29.rhaos4.15.el8 |
podman-remoteRed Hat:openshift:4.15::el8 From an advisory covering 2 CVEs |
before 3:4.4.1-29.rhaos4.15.el8 | 3:4.4.1-29.rhaos4.15.el8 |
podman-remote-debuginfoRed Hat:openshift:4.15::el8 From an advisory covering 2 CVEs |
before 3:4.4.1-29.rhaos4.15.el8 | 3:4.4.1-29.rhaos4.15.el8 |
podman-testsRed Hat:openshift:4.15::el8 From an advisory covering 2 CVEs |
before 3:4.4.1-29.rhaos4.15.el8 | 3:4.4.1-29.rhaos4.15.el8 |
openshiftRed Hat:openshift:4.15::el9 From an advisory covering 2 CVEs |
before 0:4.15.0-202408091502.p0.g396c881.assembly.stream.el9 | 0:4.15.0-202408091502.p0.g396c881.assembly.stream.el9 |
openshift-hyperkubeRed Hat:openshift:4.15::el9 From an advisory covering 2 CVEs |
before 0:4.15.0-202408091502.p0.g396c881.assembly.stream.el9 | 0:4.15.0-202408091502.p0.g396c881.assembly.stream.el9 |
ose-aws-ecr-image-credential-providerRed Hat:openshift:4.15::el9 From an advisory covering 2 CVEs |
before 0:4.15.0-202408091502.p0.g1e5e25d.assembly.stream.el9 | 0:4.15.0-202408091502.p0.g1e5e25d.assembly.stream.el9 |
ose-azure-acr-image-credential-providerRed Hat:openshift:4.15::el9 From an advisory covering 2 CVEs |
before 0:4.15.0-202408091502.p0.g0d799a2.assembly.stream.el9 | 0:4.15.0-202408091502.p0.g0d799a2.assembly.stream.el9 |
ose-gcp-gcr-image-credential-providerRed Hat:openshift:4.15::el9 From an advisory covering 2 CVEs |
before 0:4.15.0-202408091502.p0.gfc50272.assembly.stream.el9 | 0:4.15.0-202408091502.p0.gfc50272.assembly.stream.el9 |
podmanRed Hat:openshift:4.15::el9 From an advisory covering 2 CVEs |
before 3:4.4.1-29.rhaos4.15.el9 | 3:4.4.1-29.rhaos4.15.el9 |
podman-debuginfoRed Hat:openshift:4.15::el9 From an advisory covering 2 CVEs |
before 3:4.4.1-29.rhaos4.15.el9 | 3:4.4.1-29.rhaos4.15.el9 |
podman-debugsourceRed Hat:openshift:4.15::el9 From an advisory covering 2 CVEs |
before 3:4.4.1-29.rhaos4.15.el9 | 3:4.4.1-29.rhaos4.15.el9 |
podman-dockerRed Hat:openshift:4.15::el9 From an advisory covering 2 CVEs |
before 3:4.4.1-29.rhaos4.15.el9 | 3:4.4.1-29.rhaos4.15.el9 |
podman-gvproxyRed Hat:openshift:4.15::el9 From an advisory covering 2 CVEs |
before 3:4.4.1-29.rhaos4.15.el9 | 3:4.4.1-29.rhaos4.15.el9 |
podman-gvproxy-debuginfoRed Hat:openshift:4.15::el9 From an advisory covering 2 CVEs |
before 3:4.4.1-29.rhaos4.15.el9 | 3:4.4.1-29.rhaos4.15.el9 |
podman-pluginsRed Hat:openshift:4.15::el9 From an advisory covering 2 CVEs |
before 3:4.4.1-29.rhaos4.15.el9 | 3:4.4.1-29.rhaos4.15.el9 |
podman-plugins-debuginfoRed Hat:openshift:4.15::el9 From an advisory covering 2 CVEs |
before 3:4.4.1-29.rhaos4.15.el9 | 3:4.4.1-29.rhaos4.15.el9 |
podman-remoteRed Hat:openshift:4.15::el9 From an advisory covering 2 CVEs |
before 3:4.4.1-29.rhaos4.15.el9 | 3:4.4.1-29.rhaos4.15.el9 |
podman-remote-debuginfoRed Hat:openshift:4.15::el9 From an advisory covering 2 CVEs |
before 3:4.4.1-29.rhaos4.15.el9 | 3:4.4.1-29.rhaos4.15.el9 |
podman-testsRed Hat:openshift:4.15::el9 From an advisory covering 2 CVEs |
before 3:4.4.1-29.rhaos4.15.el9 | 3:4.4.1-29.rhaos4.15.el9 |
cri-oRed Hat:openshift:4.15::el8 From an advisory covering 2 CVEs |
before 0:1.28.9-5.rhaos4.15.git674ed4c.el8 | 0:1.28.9-5.rhaos4.15.git674ed4c.el8 |
cri-o-debuginfoRed Hat:openshift:4.15::el8 From an advisory covering 2 CVEs |
before 0:1.28.9-5.rhaos4.15.git674ed4c.el8 | 0:1.28.9-5.rhaos4.15.git674ed4c.el8 |
cri-o-debugsourceRed Hat:openshift:4.15::el8 From an advisory covering 2 CVEs |
before 0:1.28.9-5.rhaos4.15.git674ed4c.el8 | 0:1.28.9-5.rhaos4.15.git674ed4c.el8 |
cri-oRed Hat:openshift:4.15::el9 From an advisory covering 2 CVEs |
before 0:1.28.9-5.rhaos4.15.git674ed4c.el9 | 0:1.28.9-5.rhaos4.15.git674ed4c.el9 |
cri-o-debuginfoRed Hat:openshift:4.15::el9 From an advisory covering 2 CVEs |
before 0:1.28.9-5.rhaos4.15.git674ed4c.el9 | 0:1.28.9-5.rhaos4.15.git674ed4c.el9 |
cri-o-debugsourceRed Hat:openshift:4.15::el9 From an advisory covering 2 CVEs |
before 0:1.28.9-5.rhaos4.15.git674ed4c.el9 | 0:1.28.9-5.rhaos4.15.git674ed4c.el9 |
cri-oRed Hat:openshift:4.13::el8 From an advisory covering 3 CVEs |
before 0:1.26.5-20.rhaos4.13.git2e90133.el8 | 0:1.26.5-20.rhaos4.13.git2e90133.el8 |
cri-o-debuginfoRed Hat:openshift:4.13::el8 From an advisory covering 3 CVEs |
before 0:1.26.5-20.rhaos4.13.git2e90133.el8 | 0:1.26.5-20.rhaos4.13.git2e90133.el8 |
cri-o-debugsourceRed Hat:openshift:4.13::el8 From an advisory covering 3 CVEs |
before 0:1.26.5-20.rhaos4.13.git2e90133.el8 | 0:1.26.5-20.rhaos4.13.git2e90133.el8 |
openshiftRed Hat:openshift:4.13::el8 From an advisory covering 3 CVEs |
before 0:4.13.0-202408092110.p0.ge0953cc.assembly.stream.el8 | 0:4.13.0-202408092110.p0.ge0953cc.assembly.stream.el8 |
openshift-hyperkubeRed Hat:openshift:4.13::el8 From an advisory covering 3 CVEs |
before 0:4.13.0-202408092110.p0.ge0953cc.assembly.stream.el8 | 0:4.13.0-202408092110.p0.ge0953cc.assembly.stream.el8 |
podmanRed Hat:openshift:4.13::el8 From an advisory covering 3 CVEs |
before 3:4.4.1-12.rhaos4.13.el8 | 3:4.4.1-12.rhaos4.13.el8 |
podman-catatonitRed Hat:openshift:4.13::el8 From an advisory covering 3 CVEs |
before 3:4.4.1-12.rhaos4.13.el8 | 3:4.4.1-12.rhaos4.13.el8 |
podman-catatonit-debuginfoRed Hat:openshift:4.13::el8 From an advisory covering 3 CVEs |
before 3:4.4.1-12.rhaos4.13.el8 | 3:4.4.1-12.rhaos4.13.el8 |
podman-debuginfoRed Hat:openshift:4.13::el8 From an advisory covering 3 CVEs |
before 3:4.4.1-12.rhaos4.13.el8 | 3:4.4.1-12.rhaos4.13.el8 |
podman-debugsourceRed Hat:openshift:4.13::el8 From an advisory covering 3 CVEs |
before 3:4.4.1-12.rhaos4.13.el8 | 3:4.4.1-12.rhaos4.13.el8 |
podman-dockerRed Hat:openshift:4.13::el8 From an advisory covering 3 CVEs |
before 3:4.4.1-12.rhaos4.13.el8 | 3:4.4.1-12.rhaos4.13.el8 |
podman-gvproxyRed Hat:openshift:4.13::el8 From an advisory covering 3 CVEs |
before 3:4.4.1-12.rhaos4.13.el8 | 3:4.4.1-12.rhaos4.13.el8 |
golangRocky Linux:9 From an advisory covering 2 CVEs |
before 0:1.21.11-1.el9_4 | 0:1.21.11-1.el9_4 |
delveRocky Linux:8 From an advisory covering 2 CVEs |
before 0:1.21.2-3.module+el8.10.0+1814+f68f8a63 | 0:1.21.2-3.module+el8.10.0+1814+f68f8a63 |
golangRocky Linux:8 From an advisory covering 2 CVEs |
before 0:1.21.11-1.module+el8.10.0+1831+fc70fba6 | 0:1.21.11-1.module+el8.10.0+1831+fc70fba6 |
go-toolsetRocky Linux:8 From an advisory covering 2 CVEs |
before 0:1.21.11-1.module+el8.10.0+1831+fc70fba6 | 0:1.21.11-1.module+el8.10.0+1831+fc70fba6 |
grafanaRocky Linux:8 From an advisory covering 3 CVEs |
before 0:9.2.10-17.el8_10 | 0:9.2.10-17.el8_10 |
delveRocky Linux:8 |
before 0:1.22.1-1.module+el8.10.0+1879+0cb86608 | 0:1.22.1-1.module+el8.10.0+1879+0cb86608 |
golangRocky Linux:8 |
before 0:1.22.7-1.module+el8.10.0+1879+0cb86608 | 0:1.22.7-1.module+el8.10.0+1879+0cb86608 |
go-toolsetRocky Linux:8 |
before 0:1.22.7-1.module+el8.10.0+1879+0cb86608 | 0:1.22.7-1.module+el8.10.0+1879+0cb86608 |
git-lfsRocky Linux:9 From an advisory covering 6 CVEs |
before 0:3.6.1-1.el9 | 0:3.6.1-1.el9 |
go1.22SUSE:Linux Enterprise Software Development Kit 12 SP5 From an advisory covering 2 CVEs |
before 1.22.4-1.12.1 | 1.22.4-1.12.1 |
go1.21SUSE:Linux Enterprise Software Development Kit 12 SP5 From an advisory covering 2 CVEs |
before 1.21.11-1.36.1 | 1.21.11-1.36.1 |
go1.21SUSE:Linux Enterprise Module for Development Tools 15 SP5 From an advisory covering 2 CVEs |
before 1.21.11-150000.1.36.1 | 1.21.11-150000.1.36.1 |
go1.21SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 2 CVEs |
before 1.21.11-150000.1.36.1 | 1.21.11-150000.1.36.1 |
go1.21openSUSE:Leap 15.5 From an advisory covering 2 CVEs |
before 1.21.11-150000.1.36.1 | 1.21.11-150000.1.36.1 |
go1.21openSUSE:Leap 15.6 From an advisory covering 2 CVEs |
before 1.21.11-150000.1.36.1 | 1.21.11-150000.1.36.1 |
go1.22SUSE:Linux Enterprise Module for Development Tools 15 SP5 From an advisory covering 2 CVEs |
before 1.22.4-150000.1.18.1 | 1.22.4-150000.1.18.1 |
go1.22SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 2 CVEs |
before 1.22.4-150000.1.18.1 | 1.22.4-150000.1.18.1 |
go1.22openSUSE:Leap 15.5 From an advisory covering 2 CVEs |
before 1.22.4-150000.1.18.1 | 1.22.4-150000.1.18.1 |
go1.22openSUSE:Leap 15.6 From an advisory covering 2 CVEs |
before 1.22.4-150000.1.18.1 | 1.22.4-150000.1.18.1 |
go1.21-opensslSUSE:Linux Enterprise Module for Development Tools 15 SP5 From an advisory covering 10 CVEs |
before 1.21.13.1-150000.1.11.1 | 1.21.13.1-150000.1.11.1 |
go1.21-opensslSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 10 CVEs |
before 1.21.13.1-150000.1.11.1 | 1.21.13.1-150000.1.11.1 |
go1.21-opensslSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 10 CVEs |
before 1.21.13.1-150000.1.11.1 | 1.21.13.1-150000.1.11.1 |
go1.21-opensslSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 10 CVEs |
before 1.21.13.1-150000.1.11.1 | 1.21.13.1-150000.1.11.1 |
go1.21-opensslSUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 10 CVEs |
before 1.21.13.1-150000.1.11.1 | 1.21.13.1-150000.1.11.1 |
go1.21-opensslopenSUSE:Leap 15.5 From an advisory covering 10 CVEs |
before 1.21.13.1-150000.1.11.1 | 1.21.13.1-150000.1.11.1 |
container-suseconnectSUSE:Linux Enterprise Module for Containers 15 SP5 From an advisory covering 3 CVEs |
before 2.5.0-150000.4.55.1 | 2.5.0-150000.4.55.1 |
container-suseconnectSUSE:Linux Enterprise Module for Containers 15 SP6 From an advisory covering 3 CVEs |
before 2.5.0-150000.4.55.1 | 2.5.0-150000.4.55.1 |
container-suseconnectSUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 3 CVEs |
before 2.5.0-150000.4.55.1 | 2.5.0-150000.4.55.1 |
container-suseconnectSUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 3 CVEs |
before 2.5.0-150000.4.55.1 | 2.5.0-150000.4.55.1 |
container-suseconnectSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 3 CVEs |
before 2.5.0-150000.4.55.1 | 2.5.0-150000.4.55.1 |
container-suseconnectSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 3 CVEs |
before 2.5.0-150000.4.55.1 | 2.5.0-150000.4.55.1 |
container-suseconnectSUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 3 CVEs |
before 2.5.0-150000.4.55.1 | 2.5.0-150000.4.55.1 |
container-suseconnectSUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 3 CVEs |
before 2.5.0-150000.4.55.1 | 2.5.0-150000.4.55.1 |
container-suseconnectSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 3 CVEs |
before 2.5.0-150000.4.55.1 | 2.5.0-150000.4.55.1 |
container-suseconnectSUSE:Linux Enterprise Server for SAP Applications 15 SP2 From an advisory covering 3 CVEs |
before 2.5.0-150000.4.55.1 | 2.5.0-150000.4.55.1 |
container-suseconnectSUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 3 CVEs |
before 2.5.0-150000.4.55.1 | 2.5.0-150000.4.55.1 |
container-suseconnectSUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 3 CVEs |
before 2.5.0-150000.4.55.1 | 2.5.0-150000.4.55.1 |
container-suseconnectSUSE:Enterprise Storage 7.1 From an advisory covering 3 CVEs |
before 2.5.0-150000.4.55.1 | 2.5.0-150000.4.55.1 |
go1.21-opensslSUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 10 CVEs |
before 1.21.13.1-150600.16.3.1 | 1.21.13.1-150600.16.3.1 |
go1.21-opensslopenSUSE:Leap 15.6 From an advisory covering 10 CVEs |
before 1.21.13.1-150600.16.3.1 | 1.21.13.1-150600.16.3.1 |
go1.22-opensslSUSE:Linux Enterprise Module for Development Tools 15 SP5 From an advisory covering 14 CVEs |
before 1.22.7.1-150000.1.3.1 | 1.22.7.1-150000.1.3.1 |
go1.22-opensslopenSUSE:Leap 15.5 From an advisory covering 14 CVEs |
before 1.22.7.1-150000.1.3.1 | 1.22.7.1-150000.1.3.1 |
go1.22-opensslSUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 14 CVEs |
before 1.22.7.1-150600.13.3.1 | 1.22.7.1-150600.13.3.1 |
go1.22-opensslopenSUSE:Leap 15.6 From an advisory covering 14 CVEs |
before 1.22.7.1-150600.13.3.1 | 1.22.7.1-150600.13.3.1 |
google-osconfig-agentSUSE:Linux Enterprise Micro 5.5 |
before 20250115.01-150000.1.41.1 | 20250115.01-150000.1.41.1 |
google-osconfig-agentSUSE:Linux Enterprise Module for Public Cloud 15 SP3 |
before 20250115.01-150000.1.41.1 | 20250115.01-150000.1.41.1 |
google-osconfig-agentSUSE:Linux Enterprise Module for Public Cloud 15 SP4 |
before 20250115.01-150000.1.41.1 | 20250115.01-150000.1.41.1 |
google-osconfig-agentSUSE:Linux Enterprise Module for Public Cloud 15 SP5 |
before 20250115.01-150000.1.41.1 | 20250115.01-150000.1.41.1 |
google-osconfig-agentSUSE:Linux Enterprise Module for Public Cloud 15 SP6 |
before 20250115.01-150000.1.41.1 | 20250115.01-150000.1.41.1 |
google-osconfig-agentopenSUSE:Leap 15.6 |
before 20250115.01-150000.1.41.1 | 20250115.01-150000.1.41.1 |
google-osconfig-agentSUSE:Linux Enterprise Module for Public Cloud 12 |
before 20250115.01-1.32.1 | 20250115.01-1.32.1 |
golang-1.10Ubuntu:14.04:LTS |
All versions, plus listed versions 1.10.4-2ubuntu1~14.04.1 |
None known |
golang-1.18Ubuntu:Pro:16.04:LTS |
before 1.18.1-1ubuntu1~16.04.6+esm1, plus listed versions 1.18.1-1ubuntu1~16.04.6 |
1.18.1-1ubuntu1~16.04.6+esm1 |
golang-1.10Ubuntu:16.04:LTS |
All versions, plus listed versions 1.10.4-2ubuntu1~16.04.11.10.4-2ubuntu1~16.04.2 |
None known |
golang-1.13Ubuntu:Pro:16.04:LTS |
All versions, plus listed versions 1.13.8-1ubuntu1~16.04.21.13.8-1ubuntu1~16.04.31.13.8-1ubuntu1~16.04.3+esm21.13.8-1ubuntu1~16.04.3+esm3 |
None known |
golang-1.10Ubuntu:18.04:LTS |
All versions, plus listed versions 1.10~rc1-11.10~rc1-1ubuntu11.10~rc1-2ubuntu11.10~rc2-1ubuntu11.10-1ubuntu11.10.1-1ubuntu21.10.4-2ubuntu1~18.04.11.10.4-2ubuntu1~18.04.2 |
None known |
golang-1.13Ubuntu:Pro:18.04:LTS |
All versions, plus listed versions 1.13.8-1ubuntu1~18.04.21.13.8-1ubuntu1~18.04.31.13.8-1ubuntu1~18.04.41.13.8-1ubuntu1~18.04.4+esm1 |
None known |
golang-1.16Ubuntu:Pro:18.04:LTS |
All versions, plus listed versions 1.16.2-0ubuntu1~18.04.21.16.2-0ubuntu1~18.04.2+esm1 |
None known |
golang-1.18Ubuntu:Pro:18.04:LTS |
before 1.18.1-1ubuntu1~18.04.4+esm1, plus listed versions 1.18.1-1ubuntu1~18.04.31.18.1-1ubuntu1~18.04.4 |
1.18.1-1ubuntu1~18.04.4+esm1 |
golang-1.18Ubuntu:20.04:LTS |
before 1.18.1-1ubuntu1~20.04.3, plus listed versions 1.18.1-1ubuntu1~20.04.11.18.1-1ubuntu1~20.04.2 |
1.18.1-1ubuntu1~20.04.3 |
golang-1.21Ubuntu:20.04:LTS |
before 1.21.1-1~ubuntu20.04.3, plus listed versions 1.21.1-1~ubuntu20.04.11.21.1-1~ubuntu20.04.2 |
1.21.1-1~ubuntu20.04.3 |
golang-1.22Ubuntu:20.04:LTS |
before 1.22.2-2~20.04.1 | 1.22.2-2~20.04.1 |
golang-1.13Ubuntu:20.04:LTS |
All versions, plus listed versions 1.13.1-1ubuntu11.13.3-1ubuntu11.13.4-1ubuntu11.13.5-1ubuntu11.13.6-1ubuntu1 Show 5 moreShow less1.13.6-2ubuntu11.13.7-1ubuntu11.13.8-1ubuntu11.13.8-1ubuntu1.11.13.8-1ubuntu1.2 |
None known |
golang-1.14Ubuntu:20.04:LTS |
All versions, plus listed versions 1.14~beta1-11.14~beta1-21.14~rc1-11.14-11.14.1-1 Show 4 moreShow less1.14.2-11.14.2-1ubuntu11.14.3-2ubuntu2~20.04.11.14.3-2ubuntu2~20.04.2 |
None known |
golang-1.16Ubuntu:Pro:20.04:LTS |
All versions, plus listed versions 1.16.2-0ubuntu1~20.041.16.2-0ubuntu1~20.04.11.16.2-0ubuntu1~20.04.1+esm1 |
None known |
golang-1.20Ubuntu:20.04:LTS |
All versions, plus listed versions 1.20.3-1ubuntu0.1~20.041.20.3-1ubuntu0.1~20.04.1 |
None known |
golang-1.17Ubuntu:22.04:LTS |
All versions, plus listed versions 1.17-1ubuntu21.17.3-1ubuntu11.17.3-1ubuntu21.17.13-3ubuntu11.17.13-3ubuntu1.21.17.13-3ubuntu1.3 |
None known |
golang-1.18Ubuntu:22.04:LTS |
before 1.18.1-1ubuntu1.2, plus listed versions 1.18~beta1-0ubuntu11.18~beta2-1ubuntu11.18~beta2-1ubuntu21.18~rc1-1ubuntu11.18-1ubuntu11.18.1-1ubuntu11.18.1-1ubuntu1.1 |
1.18.1-1ubuntu1.2 |
golang-1.20Ubuntu:22.04:LTS |
All versions, plus listed versions 1.20.3-1ubuntu0.1~22.041.20.3-1ubuntu0.1~22.04.1 |
None known |
golang-1.21Ubuntu:22.04:LTS |
before 1.21.1-1~ubuntu22.04.3, plus listed versions 1.21.1-1~ubuntu22.04.11.21.1-1~ubuntu22.04.2 |
1.21.1-1~ubuntu22.04.3 |
golang-1.22Ubuntu:22.04:LTS |
before 1.22.2-2~22.04.1, plus listed versions 1.22.2-2~22.04 |
1.22.2-2~22.04.1 |
golang-1.13Ubuntu:Pro:22.04:LTS |
All versions, plus listed versions 1.13.8-1ubuntu21.13.8-1ubuntu2.22.04.11.13.8-1ubuntu2.22.04.1+esm11.13.8-1ubuntu2.22.04.2 |
None known |
golang-1.21Ubuntu:24.04:LTS |
before 1.21.9-1ubuntu0.1, plus listed versions 1.21.1-11.21.3-11.21.4-11.21.5-11.21.6-1 Show 5 moreShow less1.21.7-11.21.7-21.21.8-11.21.8-1build11.21.9-1 |
1.21.9-1ubuntu0.1 |
golang-1.22Ubuntu:24.04:LTS |
before 1.22.2-2ubuntu0.1, plus listed versions 1.22~rc1-21.22.0-11.22.0-21.22.1-11.22.1-1build11.22.2-2 |
1.22.2-2ubuntu0.1 |
golang-1.21Ubuntu:20.04:LTS From an advisory covering 9 CVEs |
before 1.21.1-1~ubuntu20.04.3, plus listed versions 1.21.1-1~ubuntu20.04.11.21.1-1~ubuntu20.04.2 |
1.21.1-1~ubuntu20.04.3 |
golang-1.21Ubuntu:22.04:LTS From an advisory covering 9 CVEs |
before 1.21.1-1~ubuntu22.04.3, plus listed versions 1.21.1-1~ubuntu22.04.11.21.1-1~ubuntu22.04.2 |
1.21.1-1~ubuntu22.04.3 |
golang-1.22Ubuntu:22.04:LTS From an advisory covering 9 CVEs |
before 1.22.2-2~22.04.1, plus listed versions 1.22.2-2~22.04 |
1.22.2-2~22.04.1 |
golang-1.21Ubuntu:24.04:LTS From an advisory covering 9 CVEs |
before 1.21.9-1ubuntu0.1, plus listed versions 1.21.1-11.21.3-11.21.4-11.21.5-11.21.6-1 Show 5 moreShow less1.21.7-11.21.7-21.21.8-11.21.8-1build11.21.9-1 |
1.21.9-1ubuntu0.1 |
golang-1.22Ubuntu:24.04:LTS From an advisory covering 9 CVEs |
before 1.22.2-2ubuntu0.1, plus listed versions 1.22~rc1-21.22.0-11.22.0-21.22.1-11.22.1-1build11.22.2-2 |
1.22.2-2ubuntu0.1 |
golang-1.18Ubuntu:Pro:16.04:LTS From an advisory covering 25 CVEs |
before 1.18.1-1ubuntu1~16.04.6+esm1, plus listed versions 1.18.1-1ubuntu1~16.04.6 |
1.18.1-1ubuntu1~16.04.6+esm1 |
golang-1.18Ubuntu:Pro:18.04:LTS From an advisory covering 25 CVEs |
before 1.18.1-1ubuntu1~18.04.4+esm1, plus listed versions 1.18.1-1ubuntu1~18.04.31.18.1-1ubuntu1~18.04.4 |
1.18.1-1ubuntu1~18.04.4+esm1 |
golang-1.18Ubuntu:20.04:LTS From an advisory covering 25 CVEs |
before 1.18.1-1ubuntu1~20.04.3, plus listed versions 1.18.1-1ubuntu1~20.04.11.18.1-1ubuntu1~20.04.2 |
1.18.1-1ubuntu1~20.04.3 |
golang-1.18Ubuntu:22.04:LTS From an advisory covering 25 CVEs |
before 1.18.1-1ubuntu1.2, plus listed versions 1.18~beta1-0ubuntu11.18~beta2-1ubuntu11.18~beta2-1ubuntu21.18~rc1-1ubuntu11.18-1ubuntu11.18.1-1ubuntu11.18.1-1ubuntu1.1 |
1.18.1-1ubuntu1.2 |
go1.22openSUSE:Tumbleweed From an advisory covering 2 CVEs |
before 1.22.4-1.1 | 1.22.4-1.1 |
go1.21openSUSE:Tumbleweed From an advisory covering 2 CVEs |
before 1.21.11-1.1 | 1.21.11-1.1 |
helmfileopenSUSE:Tumbleweed |
before 0.166.0-1.1 | 0.166.0-1.1 |
kubeloginopenSUSE:Tumbleweed |
before 0.1.4-1.1 | 0.1.4-1.1 |
orasopenSUSE:Tumbleweed |
before 1.2.1-1.1 | 1.2.1-1.1 |
google-osconfig-agentopenSUSE:Tumbleweed |
before 20250115.01-1.1 | 20250115.01-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected, aliases, references | OSV | |
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2024-24790 is a critical vulnerability (CVSS 9.8) in Go Standard Library Net/netip, published June 4, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.95%, the 80th percentile. Fixed in go 1.22.4-r0.
References
go.dev/cl/590316
groups.google.com/g/golang-announce/c/XbxouI9gY7k/m/TuoGEhxIEwAJ
pkg.go.dev/vuln/GO-2024-2887
openwall.com/lists/oss-security/2024/06/04/1
security.netapp.com/advisory/ntap-20240905-0002
Show 194 moreShow less
nvd.nist.gov/vuln/detail/CVE-2024-24790
github.com/advisories/GHSA-49gw-vxvf-fc2g
security.alpinelinux.org/vuln/CVE-2024-24790
access.redhat.com/errata/RHSA-2024:4212
bugzilla.redhat.com/2292668
errata.almalinux.org/9/ALSA-2024-4212.html
docs.bell-sw.com/security/cves/CVE-2024-24790
errata.tuxcare.com/almalinux9.2-esu/CLSA-2025-1748002217.html
security-tracker.debian.org/tracker/CVE-2024-24790
advisories.mageia.org/MGASA-2024-0217.html
bugs.mageia.org/show_bug.cgi?id=33269
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1770
docs.openshift.com/container-platform/latest/applications/working_with_helm_charts/installing-helm.html
issues.redhat.com/browse/DPROD-391
security.access.redhat.com/data/csaf/v2/advisories/2025/rhea-2025_0507.json
cve.org/CVERecord?id=CVE-2024-24788
vuln.go.dev/ID/GO-2024-2610.json
huntr.com/bounties/22158e34-cfd5-41ad-97e0-a780773d96c1
djangoproject.com/weblog/2024/aug/06/security-releases
docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.5_release_notes/index
terrapin-attack.com
tracker.ceph.com/issues/68836
errata.rockylinux.org/RLSA-2024:4212
suse.com/support/update/announcement/2024/suse-su-20241935-1
bugzilla.suse.com/1218424
ubuntu.com/security/CVE-2024-24790
lists.opensuse.org/archives/list/[email protected]/thread/L4UHTGLKMBMDBNJOV6DAPYNIXJL3CMXB
This page doesn't list everything
Left out here: 235 package rows and 151 references. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 15 source records.